Topic 3.2.1: Security
To do anything in the Wonderware MES Software/Operations system you have to be a defined User, which is a specific member of a User Group. The user group carries access rights to the system clients, process entities, and certifications. The individual user account is configured to define passwords, default labor costs, and language preferences. You can set up and modify users and user groups in the Wonderware MES Client.
In the Master Data Config group, User Groups and Users module, you can create a user group and assign special privileges and entity access rights that enable the user to access the features and entities in Wonderware MES.
Configure privileges for a User Group by selecting the Privileges tab in the tabbed workspace, after selecting the User Group you wish to modify.
Authentication Methods
Wonderware MES Software/Operations offers the ability to use three different methods of validation of users of the system. They are as follows:
Native
In the Native mode the users and groups are defined in the MES database using the Wonderware MES Client with no limitations as to either of these attributes.
OS Group
In the OS Group mode, the groups define privileges and allowable entities. The Wonderware MES Client must have access to a domain controller in order to import groups from the domain. After the groups are imported and validated, users in domain groups can be assigned privileges to the groups.
OS User
In the OS User mode, the users from a domain are assigned to groups within the MES database. The groups are not the same as domain groups and are not validated by the domain controller for privileges. To import users from the domain, the Wonderware MES Client must have access to the domain controller.